TC: Small: LockBox: Enabling Users to Keep Data Safe

现代计算机安全要求软件堆栈的每一层都没有错误代码。但在一个操作系统和管理程序漏洞越来越多的世界里，认为这些组件值得信赖可能是危险的。Lockbox提供了一层额外的安全保护，以便在操作系统或其他系统管理软件出现故障时，系统的某些部分仍能抵抗攻击。Lockbox将一组安全功能嵌入到体系结构中，以提供一种形式的内存保护，使正确编码的应用程序能够抵御攻击，即使软件堆栈的底层部分变得恶意或以其他方式受到危害。嵌套管理程序用于构建硬件修改的原型。最终，安全功能可以作为一系列小的硬件修改实现，也可以作为嵌套的管理程序实现。在前一种情况下，不需要管理程序，用户将获得性能优势。在后者中，用户将不需要等待新的硬件就能从Lockbox的安全功能中受益。密码箱为用户提供在计算机上设置安全策略的最终权限。它是一种权利保护体系结构，其中用户的能力不受限制。这对于缓解人们对硬件安全系统有朝一日可能会限制用户控制自己硬件的能力的担忧至关重要。总之，Lockbox创建了一个值得用户信任的下一代可信计算环境，以保护数据安全，使其免受恶意管理软件的攻击。

Modern computer security requires bug-free code at every layer of the software stack. But in a world where operating systems and hypervisors are increasingly buggy, it can be dangerous to assume these components are trustworthy. LockBox provides an additional layer of security such that if the operating system or other system management software fails, certain portions of the system remain resistant to attack. LockBox embeds a set of security features into the architecture to provide a form of memory protection that enables correctly coded applications to resist attack even if underlying portions of the software stack become malicious or are otherwise compromised. A nesting hypervisor is used to prototype the hardware modifications. Ultimately, the security features can be implemented either as a series of small hardware modifications or as a nesting hypervisor. In the former case, the hypervisor is unnecessary and the user will gain performance benefits. In the latter, users will not need to wait for new hardware to benefit from LockBox's security features. LockBox provides the user with final authority to set security policy on the machine. It is a rights-preserving architecture in which the user's capabilities cannot be restricted. This is critical to alleviating fears that hardware security systems could one day restrict a user's capability to control their own hardware. In summary, LockBox creates a next-generation trustworthy computing environment that can be trusted by users to keep data safe against malicious management software.